Ethereal-users: [Ethereal-users] TCP ACK packets with data in them...

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Bob Eby <beby@xxxxxxxxxxxx>
Date: Thu, 27 Feb 2003 17:34:31 -0800
Title: TCP ACK packets with data in them...

I've been using ethereal for a while now to diagnose network problems and test software.  Recently I've been working on a Java application that sends and receives TCP data using the java.nio package.  In a recent sniffer trace I see examples of TCP ACK packets that contain large amounts of data that resembles what I'm trying to send.  At the same time I *don't* see PUSH/ACK packets containing this same data.  This seems to occur, then clear up to some degree, then occur again.

Is this something any of you have encountered before?  Is it a likely data corruption from moving the capture files across a network?  Could it be there's a problem with my (tethereal in this case) installation on the capturing machine?  Is this some problem in the java.nio package?

I have no idea what could be causing this, any thoughts or clues would be helpful. 

-Bob
beby@xxxxxxxxxxxx

P.S. - I can probably attach a sniffer trace if necessary, but I'll have to blot out some of the data and have no idea what kind of size limits or other restrictions are placed on attachements for this mailing list.

P.P.S. - Thanx in advance for any help!